Expected Behaviour:
Actual Behaviour:
Nothing seems to work anymore and there a lot of weird Queries.
Your debug log shows that Pi-hole is working properly.
*** [ DIAGNOSING ]: Name resolution (IPv4) using a random blocked domain and a known ad-serving domain
[✓] net.29947.9124.302br.net is 0.0.0.0 on lo (127.0.0.1)
[✓] net.29947.9124.302br.net is 0.0.0.0 on eth0 (192.168.178.23)
[✓] doubleclick.com is 142.250.185.142 via a remote, public DNS server (8.8.8.8)
Please provide additional details regarding your problem. Screen shots of your query log, excerpts from the dnsmasq log at /var/log/pihole/pihole.log, etc.
Are those PTR type queries normal?
I didn't see them before.
And it seems that the blocking is not working like it was.
Yes, these are normal. Thr first six are Pi-hole obtaining the names of your upstream DNS server, and the rest may be as well.
Pi-hole is doing this now in a loop it seems. It just does this all the time.
Why is that? I didn't do anything beside updating.
PTR queries are okay, you'll see them appearing now and again.
If you go to some websites and then look at your Query log, can you see your computer name appearing in the Client column? Can you see various domains showing as green and OK, and sometimes pink coloured and Blocked? As well as the PTR queries can you see A queries?
Try going to cnn.com in your browser and then come back to your Pi-hole Query page and refresh it and see whats in there. Hopefully a nice mix of green and pink entries, showing that Pi-hole is working well.
That's the thing I can't see any other queries than those PTR ones anymore.
No matter which pages I open.
That's the thing I can't see any other queries than those PTR ones anymore.
No matter which pages I open.
If you have a Windows computer, run a Command Prompt (search for cmd) amd type in the command nslookup. Does it show your pihole address? Eg here is mine
If it does, then type cnn.com and it should show a load of related addresses. Then pop over to your Query log in Pi-hole and refresh it, and now you should see some A records for cnn.com. Eg here is mine again
But if it didn't show your Pi-hole address in that first step, is it showing your router address instead? If so then your Pi-hole is working but your router is telling your computers to use the router, not the Pi-hole. What do you see?
I'm using Linux but I did that and it seems it is not using Pi-Hole.
Server: 127.0.0.53
Address: 127.0.0.53#53
I think I fixed it.
I just restarted my router and now it seems to work again.
Thank you so much for your help.
I really have to learn some basics that I get this stuff much faster by my self also.
Thanks again!
It's okay, on some modern Linux that's quite normal. It's an extra layer between your OS and the DNS server. I get the same on a Linux machine here
Normally your applications go and ask your DNS server (your router, or your Pi-hole, or maybe Google) and that goes off and finds out. In this case your applications ask this extra layer, 127.0.0.53, and then it goes off on the applications's behalf and asks your real DNS (again the router or the Pi-hole, etc) and that goes off and finds out.
To see where the layer is going. what do you get when you view its config file by typing
cat /run/systemd/resolve/resolv.conf
Be careful on the spelling, there's an e at the end of the first resolve and not in the second. Here's what I get. You can see at the bottom next to nameserver it shows the same IP as the Windows example above – my true Pi-hole address
You're welcome, I think you fixed it yourself though! You're doing the right thing by getting stuck in and trying things out, there's a lot to know about. The PTR queries are okay and you should be seeing A records and machines on your network and domain names appearing now in the Query log, so you can enjoy your Pi-hole.
Yes now it shows me the right server address again.
Everything works like it should again.
Thank you very much for your help and tips.
This topic was automatically closed 21 days after the last reply. New replies are no longer allowed.